This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryBroad release touches Commit Details, Bug Fixes, Commit Statistics, and New Features.
Full changelog
New Features
- use
gix_path::env::core_dir_program()for git-upload-pack
This way it can be found even if not in path, or through Git.
Bug Fixes
-
re-authenticate smart HTTP redirects
-
preserve the underlying error when a reqwest request fails without a status
When the blockingreqwestHTTP backend failed without an HTTP status --
e.g. a connection or TLS failure, as whenhttp-client-reqwestis used
without a TLS feature against anhttps://URL -- it stringified the
reqwest::Errorbefore wrapping it in anio::Error. That dead-ended
source(), so callers only saw "An IO error occurred when talking to the
server" with no way to reach the real cause.Keep the
reqwest::Erroras theio::Error's source (via
io::Error::other) so the underlying cause is preserved. The HTTP-status
branch is unchanged.Adds a
reqwest-only regression test that drives a refused connection and
asserts the error source is retained; it runs under the
http-client-reqwesttest configuration, which also adds http test
coverage for that backend.
Changed (BREAKING)
-
replace
maybe-asyncwithbisync.
Replace the globally feature-selected maybe-async dependency with bisync 0.3 and
re-export the locally selected macro mode from gix-protocol.Also use it to deduplicate portions which previously couldn't be handled.
Commit Statistics
- 21 commits contributed to the release.
- 31 days passed between releases.
- 4 commits were understood as conventional.
- 1 unique issue was worked on: #2685
Commit Details
view details- #2685
- Re-authenticate smart HTTP redirects (ac26491)
- Uncategorized
- Update changelogs prior to release (cb6ec7d)
- Release gix-trace v0.1.21, gix-validate v0.11.3, gix-path v0.12.3, gix-utils v0.3.5, gix-config-value v0.19.0, gix-prompt v0.16.0, gix-sec v0.14.2, gix-url v0.37.0, gix-credentials v0.39.0, safety bump 18 crates (f0ec710)
- Merge pull request #2734 from GitoxideLabs/url-parse-convenience (e7af50e)
- Adapt to changes in gix-url (271454b)
- Merge pull request #2728 from GitoxideLabs/try-bisync (adf4b7a)
- Deduplicate fetch I/O across async and blocking modes (2619919)
- Replace
maybe-asyncwithbisync. (c3f2244) - Merge pull request #2722 from GitoxideLabs/reasons (c16b5a1)
- Replace lint allowances with expectations (43ff87a)
- Merge pull request #2714 from GitoxideLabs/fix-credentials-parsing (cf3053a)
- Release gix-path v0.12.2, gix-error v0.2.5, gix-utils v0.3.4, gix-date v0.15.6, gix-url v0.36.2, gix-credentials v0.38.2 (27aec47)
- Merge pull request #2700 from ameyypawar/fix/2313-upload-pack-fallback (9884f48)
- Review (151a0af)
- Use
gix_path::env::core_dir_program()for git-upload-pack (41e1bd7) - Merge pull request #2686 from GitoxideLabs/try-redirect-re-auth (d8aeaac)
- Merge pull request #2681 from GitoxideLabs/lossy-url-conversion (b893e01)
- Pin SSH upload-pack paths for SCP-like URLs (e94565e)
- Merge pull request #2669 from ameyypawar/fix/2140-reqwest-error-source (c8fbf29)
- Preserve the underlying error when a reqwest request fails without a status (1228b87)
- Merge pull request #2646 from GitoxideLabs/report (1b1541e)
Breaking Changes
- Replace `maybe-async` with `bisync` (0.3), affecting global async/await macro selection and deduplicating code paths.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- vgix-v0.84.0 Allow checkouts of empty repositories; `destination_must_be_empty` becomes `Option<bool>`
- vgix-worktree-stream-v0.33.0 Changes API of `Stream::add_entry_from_path` to require `hash_kind` argument.
- vgix-object-v0.61.0 Renames `Data::hash_kind` to `Data::object_hash` for consistency.
Beta — feedback welcome: [email protected]